C++: Fix FP by also excluding indirections of array expressions.

2026-04-24 16:25:15 +02:00 · 2024-06-13 10:59:39 +01:00
parent eec259279a
commit 4079de125f
1 changed files with 1 additions and 1 deletions
--- a/cpp/ql/lib/semmle/code/cpp/security/flowafterfree/FlowAfterFree.qll
+++ b/cpp/ql/lib/semmle/code/cpp/security/flowafterfree/FlowAfterFree.qll
@@ -95,7 +95,7 @@ module FlowFromFree<FlowFromFreeParamSig P> {
        e = any(StoreInstruction store).getDestinationAddress().getUnconvertedResultExpression()
      )
      or
-      n.asExpr() instanceof ArrayExpr
+      [n.asExpr(), n.asIndirectExpr()] instanceof ArrayExpr
    }
  }